Lucene search
CiscoCISCO-SA-CURL-LIBCURL-D9DS39CVHistoryOct 12, 2023 - 4:00 p.m.
cURL and libcurl Vulnerability Affecting Cisco Products: October 2023
2023-10-1216:00:00
tools.cisco.com
47
curl
libcurl
vulnerability
cisco
security
advisory
software
cve-2023-38545
On October 11, 2023, cURL released Version 8.4.0 of the cURL utility and the libcurl library. This release addressed two security vulnerabilities:
CVE-2023-38545 – High Security Impact Rating (SIR)
CVE-2023-38546 – Low SIR
This advisory covers CVE-2023-38545 only. For more information about this vulnerability, see the cURL advisory [“https://curl.se/docs/CVE-2023-38545.html”].
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-curl-libcurl-D9ds39cV [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-curl-libcurl-D9ds39cV”]
Affected configurations
Node
ciscocisco_adaptive_security_appliance_\(asa\)_softwareMatchany
ORciscocrosswork_change_automationMatchany
ORciscosecure_network_analyticsMatchany
ORciscocisco_adaptive_security_appliance_\(asa\)_softwareMatchany
ORciscocrosswork_change_automationMatchany
ORciscosecure_network_analyticsMatchany
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | cisco_adaptive_security_appliance_\(asa\)_software | any | cpe:2.3:a:cisco:cisco_adaptive_security_appliance_\(asa\)_software:any:*:*:*:*:*:*:* |
| cisco | crosswork_change_automation | any | cpe:2.3:a:cisco:crosswork_change_automation:any:*:*:*:*:*:*:* |
| cisco | secure_network_analytics | any | cpe:2.3:a:cisco:secure_network_analytics:any:*:*:*:*:*:*:* |
Related
nessus
nessus
redhat
redhat
(RHSA-2023:5700) Important: curl security update
2023-10-13 21:38:55
(RHSA-2023:6745) Important: curl security update
2023-11-07 10:08:50
(RHSA-2023:5763) Important: curl security update
2023-10-17 08:40:49
fedora
fedora
[SECURITY] Fedora 39 Update: curl-8.2.1-3.fc39
2023-10-16 15:27:49
[SECURITY] Fedora 38 Update: curl-8.0.1-5.fc38
2023-10-14 01:32:18
[SECURITY] Fedora 37 Update: curl-7.85.0-12.fc37
2023-10-28 01:25:37
redos
redos
ROS-20231016-05
2023-10-16 00:00:00
oraclelinux
oraclelinux
curl security update
2023-11-16 00:00:00
curl security update
2023-10-18 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1055)
2024-01-09 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1005)
2024-01-05 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1376)
2024-03-14 00:00:00
qualysblog
qualysblog
Curl 8.4.0 – Proactively Identifying Potential Vulnerable Assets
2023-10-06 00:14:06
cloudfoundry
cloudfoundry
USN-6429-1: curl vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
USN-6429-2: curl vulnerability | Cloud Foundry
2023-12-04 00:00:00
slackware
slackware
[slackware-security] curl
2023-10-11 06:45:13
amazon
amazon
Important: curl
2023-10-10 21:19:00
ubuntu
ubuntu
curl vulnerabilities
2023-10-17 00:00:00
curl vulnerabilities
2023-10-11 00:00:00
curl vulnerability
2023-10-11 00:00:00
aix
aix
Multiple vulnerabilities in cURL libcurl affect AIX
2023-12-11 13:22:02
osv
osv
Important: curl security update
2023-11-07 00:00:00
Important: curl security update
2023-10-17 00:00:00
Important: curl security update
2023-10-24 18:36:52
almalinux
almalinux
Important: curl security update
2023-11-07 00:00:00
Important: curl security update
2023-10-17 00:00:00
debian
debian
[SECURITY] [DSA 5523-1] curl security update
2023-10-11 06:58:41
[SECURITY] [DLA 3613-1] curl security update
2023-10-11 11:49:02
paloalto
paloalto
Impact of curl and libcurl Vulnerabilities (CVE-2023-38545, CVE-2023-38546)
2023-10-12 20:40:00
mageia
mageia
Updated the curl packages to fix two security vulnerabilities
2023-10-14 01:56:51
ibm
ibm
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libcurl vulnerabilities (CVE-2023-38546, CVE-2023-38545)
2023-11-17 12:13:59
Security Bulletin: IBM App Connect Enterprise is vulnerable to a heap-based buffer overflow due to libcurl and cURL. (CVE-2023-38546, CVE-2023-38545)
2023-11-20 15:27:29
Security Bulletin: Multiple vulnerabilities in cURL libcurl affect AIX
2023-12-11 20:06:48
rocky
rocky
curl security update
2023-10-24 18:36:52
thn
thn
Security Patch for Two New Flaws in Curl Library Arriving on October 11
2023-10-09 10:32:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0113
2023-10-11 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0487
2023-10-11 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0667
2023-10-11 00:00:00
debiancve
debiancve
CVE-2023-38545
2023-10-18 04:15:11
CVE-2023-38546
2023-10-18 04:15:11
cbl_mariner
cbl_mariner
CVE-2023-38545 affecting package curl for versions less than 8.3.0-2
2023-10-12 19:11:35
CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10
2023-10-21 15:00:39
CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10
2023-10-21 15:00:39
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Haxx Libcurl
2024-03-28 06:05:37
Exploit for Out-of-bounds Write in Haxx Libcurl
2024-03-19 13:45:09
Exploit for Out-of-bounds Write in Haxx Libcurl
2023-10-16 15:55:32
ubuntucve
ubuntucve
CVE-2023-38546
2023-10-11 00:00:00
CVE-2023-38545
2023-10-11 00:00:00
veracode
veracode
Cookie Injection
2023-10-12 08:53:47
Heap Buffer Overflow
2023-10-11 14:40:13
prion
prion
Design/Logic Flaw
2023-10-18 04:15:00
Heap overflow
2023-10-18 04:15:00
cvelist
cvelist
CVE-2023-38546
2023-10-18 03:51:31
CVE-2023-38545
2023-10-18 03:52:00
wolfi
wolfi
CVE-2023-38546 vulnerabilities
2024-09-28 21:12:41
CVE-2023-38545 vulnerabilities
2024-09-28 21:12:41
wizblog
wizblog
redhatcve
redhatcve
CVE-2023-38546
2023-10-11 13:11:32
CVE-2023-38545
2023-10-11 07:12:30
f5
f5
K000137211 : cURL vulnerabilities CVE-2023-38546
2023-10-11 00:00:00
K000137257 : cURL vulnerabilities CVE-2023-38545
2023-10-17 00:00:00
cnvd
cnvd
cURL SOCKS5 Heap Overflow Vulnerability
2023-10-11 00:00:00
broadcom
broadcom
SOCKS5 heap buffer overflow (CVE-2023-38545)
2023-10-16 00:00:00
hackerone
hackerone
curl: [Critical] Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet
2023-10-10 04:25:20
curl: CVE-2023-38545: socks5 heap buffer overflow
2023-09-30 08:26:30
curl: CVE-2023-38546: cookie injection with none file
2023-09-14 14:58:50
mscve
mscve
Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow
2023-10-19 07:00:00
alpinelinux
alpinelinux
CVE-2023-38546
2023-10-18 04:15:11
CVE-2023-38545
2023-10-18 04:15:11
nvd
nvd
CVE-2023-38546
2023-10-18 04:15:11
CVE-2023-38545
2023-10-18 04:15:11
cve
cve
CVE-2023-38546
2023-10-18 04:15:11
CVE-2023-38545
2023-10-18 04:15:11
cloudlinux
cloudlinux
curl: Fix of CVE-2023-38546
2023-10-16 13:58:12
cgr
cgr
CVE-2023-38546 vulnerabilities
2024-05-19 03:07:16
CVE-2023-38545 vulnerabilities
2024-05-19 03:07:16
vulnrichment
vulnrichment
CVE-2023-38546
2023-10-18 03:51:31
freebsd
freebsd
curl -- SOCKS5 heap buffer overflow
2023-09-30 00:00:00
veeam
veeam
Vulnerability Scanner Detection Related to CVE-2023-38545
2023-12-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2379
2024-03-26 11:18:17
ics
ics
Rockwell Automation FactoryTalk Activation
2024-01-04 12:00:00
Siemens RUGGEDCOM APE1808
2024-03-14 12:00:00